Google Android Mediaserver Information Disclosure Vulnerability (CNVD-2016-11143)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An information disclosure vulnerability exists in Mediaserver in Android. A local attacker can exploit this...

Google Releases Supplemental Patch for Dirty Cow Vulnerability

Google’s November Android Security Bulletin, released Monday, patched 15 critical vulnerabilities and addressed 85 CVEs overall. But conspicuously absent is a fix for the Linux race condition vulnerability known as Dirty Cow Copy-on-Write that also impacts Android. While Google didn’t issue an...

CVE-2016-6699

A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-09559)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. There is a security vulnerability in Android Mediaserver. The vulnerability can be exploited by an attacker to gain access with the...

Android Mediaserver SoftMPEG4 Component Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the SoftMPEG4 component of libstagefright in Android's Mediaserver allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-09558)

Android is an open source operating system based on Linux. Android's Mediaserver has a security vulnerability that allows a remote attacker to build malicious apps with elevated privileges...

Android Mediaserver SoundTriggerHwService.cpp Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the services/soundtrigger/SoundTriggerHwService.cpp file in Android's Mediaserver allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android Mediaserver Denial of Service Vulnerability (CNVD-2016-09552)

Android is an open source operating system based on Linux. A security vulnerability in the id3/ID3.cpp file in libstagefright in Android's Mediaserver allows remote attackers to exploit the vulnerability to build malicious applications that can crash the application...

Android Mediaserver Conditional Contested Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A competitive condition vulnerability exists in the media/libmediaplayerservice/MediaPlayerService.cpp file in Android's Mediaserver, allowing remote attackers to exploit the vulnerability to build malicious applications with elevated...

CVE-2016-3933

mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 29421408...

CVE-2016-3933

mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 29421408...

CVE-2016-3932

mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTek internal bug ALPS02770870...

CVE-2016-3932

mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTek internal bug ALPS02770870...

CVE-2016-3924

services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECTCMDSETPARAM and EFFECTCMDSETPARAMDEFERRED commands, which allows attackers to obtain sensitive information...

CVE-2016-3920

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...

CVE-2016-3913

media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate a certain staticcast operation, which allows attackers to gain privileges via a crafted...

CVE-2016-3910

services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546...

CVE-2016-3910

services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546...

CVE-2016-3909

The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30033990...

Code injection

services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546...